CVE-2026-2303
MediumAdvisory
Published 10 Feb 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.002
- 14th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 579
- of 17,787 indexed, latest versions
- Container images
- 607
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling
Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 607 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.mongodb.org/ | v1.0.0, v1.0.3, v1.0.4, v1.1.0+54 more | 1.17.7 | 604 |
| go.mongodb.org/ | v2.2.2, v2.3.0, v2.3.1, v2.4.0 | 2.4.2 | 12 |
- OSV records
- GHSA-cp6g-7hqx-qxhp
- Also known as
- GO-2026-5327
Charts affected
579 by stars
Container images carrying it
607 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 8577eb292a01 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 63baf86a49ac | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | d78cd113b2bc | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | b741efae8d31 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 9663f06adcb1 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 4fbd63194674 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | ebba936046ab | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 5702ea361420 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 796f75ea413b | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | c3d20bc2ea08 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | c6b68f158628 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | d853057f2800 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 65a38180e27a | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | c241c971aef8 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | b61c1ed2f015 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | bdfee214c7ea | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 879b9bead838 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | cb734024b3fd | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 088464f949de | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 88b605de9aba | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | d4c97a1b2d67 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 706cde441321 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 78aec597d87a | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 7bbe804260f3 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | e2dc5623bcdd | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | ebb560bcb6bd | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 04f2b98d71ef | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 6b3f6d8b4c0a | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 890b3bb05cf4 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | a2d502c204f9 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | a7cc63108511 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | b4f51de53357 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | be2aef39a2f8 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | cd7d1a82ef00 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 3b9b2a15d376 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 4748e26f9369 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 56e7f18e05dd | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 5888c188cf09 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 63805ebb8d2b | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 6927e0919a14 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 91100b06e86d | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 9abc6cf6aea7 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | b37103e03399 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | f20d3127bf28 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 7b4202c25b67 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 6ba82beff18e | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 4853591bd1d2 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | 5b62aaade3c9 | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | aae7b2b030ed | go.mongodb.org/ | 1.17.7 | 1 |
| quay.io/ | e362f02ed304 | go.mongodb.org/ | 1.17.7 | 1 |